Turn Off REST APIv1.1.4
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Alternatives to WP REST API Force SSL
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Disable WP REST APIv2.6.9
Disables the WP REST API for visitors not logged into WordPress.
Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.
Expose Advanced Custom Fields in the WordPress REST API with proper access control.
Connect WordPress to any REST API. Configure endpoints, manage credentials securely, and display data using shortcodes or template functions.
CuteJsonv1.1.1
Secure, feature-rich WordPress plugin to manage and host JSON files with persistent, scoped REST endpoints. Create your own mock APIs easily.
JWT authentication for the WordPress REST API: access and refresh tokens with rotation, revocation, and validation for headless and decoupled apps.
WP-API JSON Feedv1.1.1
Implements JSON feeds following the official JSON feed specification by using the WordPress REST API.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.